| #101 | Seraphinite Accelerator | 22 | 594 | 255 | 50k+ | | | Output is not escaped |
| #102 | ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF | 22 | 1,044 | 799 | 300k+ | | | Non-prefixed global variable |
| #103 | SSL Zen — SSL Certificate Installer & HTTPS Redirects | 22 | 779 | 1,575 | 10k+ | | | Non-prefixed global variable |
| #104 | Theme Editor | 22 | 798 | 685 | 50k+ | | | Output is not escaped |
| #105 | Customize Feeds for Twitter | 22 | 92 | 171 | 4k+ | | | Non-prefixed global variable |
| #106 | RapidLoad AI – Optimize Web Vitals Automatically | 22 | 81 | 840 | 800 | | | Nonce verification recommended |
| #107 | Welcart e-Commerce | 22 | 10,377 | 10,896 | 10k+ | | | Text Domain Mismatch |
| #108 | WCFM Marketplace – Multivendor Marketplace for WooCommerce | 22 | 1,937 | 1,969 | 10k+ | | | Non-prefixed global variable |
| #109 | WCFM Membership – WooCommerce Memberships for Multivendor Marketplace | 22 | 559 | 675 | 10k+ | | | Non-prefixed global variable |
| #110 | Simple Shopping Cart | 22 | 796 | 536 | 10k+ | | | Unsafe printing function |
| #111 | Asset CleanUp: Page Speed Booster | 22 | 2,030 | 2,485 | 100k+ | | | Non-prefixed global variable |
| #112 | WP Easy Pay – Payment and Donation form Builder for Square | 22 | 893 | 1,828 | 1k+ | | | Non-prefixed global variable |
| #113 | WP Express Checkout (Fast Payments via PayPal & Stripe) | 22 | 591 | 627 | 1k+ | | | Output is not escaped |
| #114 | File Manager | 22 | 740 | 520 | 1m+ | | | Unsafe printing function |
| #115 | WP Fusion Lite – Marketing Automation and CRM Integration for WordPress | 22 | 276 | 683 | 5k+ | | | Nonce verification recommended |
| #116 | WP Umbrella: Update Backup Restore & Monitoring | 22 | 918 | 916 | 70k+ | | | Exception output is not escaped |
| #117 | Wp-Insert | 22 | 267 | 301 | 10k+ | | | Output is not escaped |
| #118 | AidWP – Donation & Payment Forms (Stripe Powered) | 22 | 1,317 | 1,675 | 800 | | | Non-prefixed global variable |
| #119 | WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript | 22 | 164 | 257 | 9k+ | | | Non-prefixed constant |
| #120 | NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce | 22 | 1,353 | 1,412 | 2k+ | | | Non-prefixed global variable |
| #121 | WP-WebAuthn | 22 | 957 | 396 | 2k+ | | | Exception output is not escaped |
| #122 | WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell | 22 | 5,996 | 2,790 | 5k+ | | | Text Domain Mismatch |
| #123 | WPSSO Core – Complete Schema Markup and Meta Tags | 22 | 1,407 | 412 | 5k+ | | | Missing Translators Comment |
| #124 | YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports | 22 | 654 | 435 | 10k+ | | | Exception output is not escaped |
| #125 | Recipe Cards For Your Food Blog from Zip Recipes | 22 | 1,126 | 1,731 | 1k+ | | | Non-prefixed global variable |
| #126 | Affiliate Super Assistent | 23 | 1,280 | 267 | 2k+ | | | Text Domain Mismatch |
| #127 | B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More | 23 | 1,347 | 409 | 10k+ | | | Text Domain Mismatch |
| #128 | BlossomThemes Email Newsletter | 23 | 337 | 239 | 20k+ | | | Output is not escaped |
| #129 | Booking calendar, Appointment Booking System | 23 | 1,079 | 1,125 | 4k+ | | | Output is not escaped |
| #130 | Business Directory Plugin – Easy Listing Directories for WordPress | 23 | 611 | 1,058 | 10k+ | | | Non-prefixed global variable |
| #131 | Captivate Sync | 23 | 174 | 557 | 1k+ | | | Non-prefixed global variable |
| #132 | WPBot – AI ChatBot for Live Support, Lead Generation, AI Services | 23 | 264 | 1,038 | 5k+ | | | Non-prefixed global variable |
| #133 | Church Admin | 23 | 1,643 | 4,202 | 900 | | | Direct Query |
| #134 | Classified Listing – AI-Powered Classified ads & Business Directory | 23 | 155 | 2,074 | 9k+ | | | Non-prefixed global variable |
| #135 | Content Egg – Affiliate Product Importer & Price Comparison | 23 | 1,231 | 1,257 | 10k+ | | | Non-prefixed global variable |
| #136 | Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | 23 | 9,310 | 26,642 | 1k+ | | | Non-prefixed global variable |
| #137 | Currency Exchange for WooCommerce | 23 | 703 | 502 | 500 | | | Output is not escaped |
| #138 | DK PDF – WordPress PDF Generator | 23 | 744 | 335 | 3k+ | | | Exception output is not escaped |
| #139 | Easy Digital Downloads – eCommerce Payments and Subscriptions made easy | 23 | 3,723 | 10,283 | 40k+ | | | Non-prefixed namespace |
| #140 | Essential Real Estate | 23 | 529 | 5,060 | 8k+ | | | Non-prefixed global variable |
| #141 | Export WordPress Pages to Static HTML & PDF — Static Site Export | 23 | 490 | 301 | 5k+ | | | Text Domain Mismatch |
| #142 | Ezoic | 23 | 432 | 516 | 10k+ | | | Output is not escaped |
| #143 | Fastcache by Host.it | 23 | 1,327 | 203 | 600 | | | Text Domain Mismatch |
| #144 | Feed Them Social – Social Media Feeds, Video, and Photo Galleries | 23 | 563 | 535 | 20k+ | | | Output is not escaped |
| #145 | Flexmls® IDX Plugin | 23 | 1,268 | 957 | 1k+ | | | Output is not escaped |
| #146 | Tracking and Consent Manager – WP Full Picture | 23 | 1,280 | 3,223 | 3k+ | | | Non-prefixed global variable |
| #147 | FV Flowplayer Video Player | 23 | 1,311 | 1,454 | 20k+ | | | Output is not escaped |
| #148 | GAinWP Google Analytics Integration for WordPress | 23 | 525 | 176 | 8k+ | | | Output is not escaped |
| #149 | Houzez Property Feed | 23 | 1,464 | 1,615 | 1k+ | | | Text Domain Mismatch |
| #150 | Iks Menu – WordPress Category Accordion Menu & FAQs | 23 | 615 | 1,293 | 10k+ | | | Non-prefixed global variable |